WHAT IS CLAIMED IS: 

1. A storage unit detachable from an information 
processing apparatus, comprising: 

storage means for storing user information for 
5 user authentication; 

authentication means for performing 
authentication processing on the basis of 
authentication information input from an information 
processing apparatus in which the storage unit is 
10 mounted, and user information stored in said storage 
means ; and 

output means for outputting an authentication 
result of said authentication means. 

2 . The unit according to claim 1 , wherein 

15 said authentication means performs authentication 

on the basis of authentication information transmitted 
from the information processing apparatus together with 
eject instruction, and the user information stored in 
said storage means, and 

20 said output means notifies the information 

processing apparatus of eject permission when 
authentication by said authentication means is 
successful . 

3 . The unit according to claim 2 , wherein 
25 the user information includes a pair of 

identification information and password information 
which specify a user, and 
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said authentication means determines that 
authentication is successful when a pair of 
identification information and password information 
contained in the authentication information are 
5 contained in the user information. 

4 . The unit according to claim 3 , wherein 
the user information contains an attribute 

assigned to a user, and 

said authentication means determines that 

10 authentication is successful when the pair of 

identification information and password information 
contained in the authentication information are 
contained in the user information and a user specified 
by the pair of identification information and password 

15 information is assigned a predetermined attribute. 

5 . The unit according to claim 4 , wherein the 
predetermined attribute includes mounter information 
which specifies a user who is first permitted to access 
the storage unit. 

20 6. The unit according to claim 4, wherein the 

predetermined attribute information includes owner 
information representing an owner of the storage unit. 
7. The unit according to claim 4, wherein 

the unit further comprises holding means for 

25 holding designation information which designates an 

attribute to be used for authentication processing by 
said authentication means, and 
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said authentication means determines that 
authentication is successful when the user specified by 
the pair of identification information and password 
information contained in the authentication information 
5 is assigned the attribute designated by the designation 
information. 

8. An information processing apparatus which allows 
detaching a storage unit having 

storage means for storing user information for 

10 user authentication, 

authentication means for performing 
authentication processing on the basis of 
authentication information input from the information 
processing apparatus in which the storage unit is 

15 mounted, and user information stored in the storage 
means , and 

output means for outputting an authentication 
result of the authentication means, comprising: 

providing means for providing an interface for 
20 causing a user to input authentication information in 
executing predetermined processing for the storage 
unit ; 

transmission means for transmitting the 
authentication information input via the interface to 
25 the storage unit; and 

execution means for executing the predetermined 
processing for the storage unit on the basis of the 



- 30 - 



authentication result output from the output means in 
response to transmission of the authentication 
information. 

9. The apparatus according to claim 8, wherein the 

5 predetermined processing includes eject processing for 
the storage unit . 

10. An access control method for a storage unit 
detachable from an information processing apparatus, 
comprising: 

10 a registration step of registering user 

information for user authentication in a storage medium 

arranged in the storage unit; 

a providing step of providing an interface for 

causing a user to input authentication information in 
15 executing predetermined processing for the storage 

unit ; 

an authentication step of causing the storage 
unit to execute authentication processing on the basis 
of the authentication information input via the 

20 interface and the user information registered in the 
registration step; and 

an execution step of executing the predetermined 
processing for the storage unit on the basis of an 
authentication result in the authentication step. 

25 11. The method according to claim 10, wherein the 

predetermined processing includes eject processing for 
the storage unit. 
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12. A control program for causing an information 
processing apparatus which allows detaching a storage 
unit to execute predetermined processing for the 
storage unit, the storage unit having 
5 storage means for storing user information for 

user authentication , 

authentication means for performing 
authentication processing on the basis of 
authentication information input from the information 
10 processing apparatus in which the storage unit is 

mounted, and user information stored in the storage 
means , and 

output means for outputting an authentication 
result of the authentication means, eject processing 
15 comprising: 

a providing step of providing an interface for 
causing a user to input authentication information in 
executing the predetermined processing for the storage 
unit ; 

20 a transmission step of transmitting the 

authentication information input via the interface to 
the storage unit; 

a reception step of receiving the authentication 
result output from the output means in response to 
25 transmission of the authentication information; and 

an execution step of executing the predetermined 
processing for the storage unit on the basis of the 
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authentication result. 

13. A computer- readable memory which stores a control 
program defined in claim 12. 
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